
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/JaozY1LC60yKHxdIxOB-E0iX1t0.roa
File: JaozY1LC60yKHxdIxOB-E0iX1t0.roa (raw, json)
Hash identifier: OPF6jBQCfVWZLlLB/67BOOY2NpB3o7UOxfL3O5afl3M=
Subject key identifier: 25:AA:33:63:52:C2:EB:4C:8A:1F:17:48:C4:E0:7E:13:48:97:D6:DD
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 0199340E8F78E866062673E81D143AF374A7
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/JaozY1LC60yKHxdIxOB-E0iX1t0.roa
Signing time: Wed 10 Sep 2025 14:36:33 +0000
ROA not before: Wed 10 Sep 2025 14:36:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33651
IP address blocks: 185.22.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:0e:8f:78:e8:66:06:26:73:e8:1d:14:3a:f3:74:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Sep 10 14:36:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25aa336352c2eb4c8a1f1748c4e07e134897d6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:1e:2b:63:45:e6:3a:7e:02:e1:79:61:93:
85:23:87:2a:0a:e9:48:8f:15:c1:1c:81:7c:0e:80:
1c:15:73:ca:74:b1:e4:b9:32:2f:ca:33:83:4c:76:
46:56:c8:9f:17:6f:e5:f9:7a:11:51:2a:80:cd:de:
76:9f:53:86:36:b9:a9:d2:bd:bc:4f:1c:b5:b6:a6:
06:c6:ce:f2:51:4f:d9:61:97:ad:d1:31:8f:85:63:
0c:44:80:af:90:73:df:fa:15:ae:cc:fc:6b:01:c8:
dc:81:ae:33:12:4a:67:bc:96:9f:91:9f:22:da:49:
93:0c:5b:c8:03:21:c5:7b:25:79:cd:98:ab:07:a1:
f4:23:1b:e5:90:b9:07:e0:79:da:4c:10:70:05:41:
94:cb:ec:90:5e:63:23:35:4a:9b:ae:df:d1:7f:36:
9c:fb:3a:4a:87:00:1f:84:b3:4e:11:91:a6:ae:fe:
4a:47:8c:8f:7a:88:bd:cd:fc:ca:54:2c:e1:c5:01:
2d:ed:60:73:04:ce:58:fc:60:48:80:46:4b:89:ce:
76:62:2a:18:be:02:e5:23:4b:3d:30:ca:c4:0d:11:
bd:fd:61:8d:db:ac:e6:50:9b:67:2a:f4:63:34:40:
c9:ba:82:c3:36:23:2e:36:11:85:e7:78:95:03:71:
40:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AA:33:63:52:C2:EB:4C:8A:1F:17:48:C4:E0:7E:13:48:97:D6:DD
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/JaozY1LC60yKHxdIxOB-E0iX1t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.43.0/24
Signature Algorithm: sha256WithRSAEncryption
00:32:f7:db:17:9c:3d:28:f5:e3:e8:85:7a:6e:30:f3:68:e1:
76:e0:2c:a6:2b:06:6a:de:46:0d:3a:9e:58:88:04:21:42:e6:
30:fc:31:32:1d:f3:c7:d7:96:6e:43:fb:00:f1:bc:36:bf:94:
33:67:15:cd:30:46:e9:66:d8:66:23:07:3d:d9:53:62:f7:f2:
f9:6e:9b:0c:30:b9:e4:0f:65:75:5d:68:8a:85:a8:57:c4:9f:
44:20:d9:f4:6e:75:a2:d7:ff:2d:50:dd:8b:af:1b:63:8d:d5:
22:b9:22:7a:8f:5a:c7:6c:39:93:f5:8a:d2:37:6d:ec:dd:6b:
7b:fd:93:42:c8:64:23:76:2c:d5:a0:9c:7b:2f:ff:ac:a0:33:
45:60:f4:5e:15:ac:f8:e5:6e:52:4d:38:14:bb:91:71:36:c1:
85:7f:b1:3c:03:33:12:c6:41:b9:e9:ec:97:5e:cc:84:a4:b5:
7a:28:d8:0d:a3:7b:8a:c6:81:55:07:4d:39:4e:e9:84:cc:03:
52:f0:c9:ba:b8:42:7a:2b:36:cb:10:2a:91:99:d6:e6:fc:53:
0d:6d:18:b3:3e:29:98:07:6e:5a:d1:14:ce:ac:29:88:aa:47:
15:73:40:83:a9:19:e0:f1:c8:7d:45:b5:8b:08:4a:f0:36:3f:
0f:d8:20:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZk0Do946GYGJnPoHRQ683SnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx
ZjZhN2QwHhcNMjUwOTEwMTQzNjMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWFhMzM2MzUyYzJlYjRjOGExZjE3NDhjNGUwN2UxMzQ4OTdkNmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueAeK2NF5jp+AuF5YZOFI4cqCulI
jxXBHIF8DoAcFXPKdLHkuTIvyjODTHZGVsifF2/l+XoRUSqAzd52n1OGNrmp0r28
Txy1tqYGxs7yUU/ZYZet0TGPhWMMRICvkHPf+hWuzPxrAcjcga4zEkpnvJafkZ8i
2kmTDFvIAyHFeyV5zZirB6H0IxvlkLkH4HnaTBBwBUGUy+yQXmMjNUqbrt/Rfzac
+zpKhwAfhLNOEZGmrv5KR4yPeoi9zfzKVCzhxQEt7WBzBM5Y/GBIgEZLic52YioY
vgLlI0s9MMrEDRG9/WGN26zmUJtnKvRjNEDJuoLDNiMuNhGF53iVA3FAdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCWqM2NSwutMih8XSMTgfhNIl9bdMB8GA1UdIwQY
MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt
MjdmYmM5OWVhM2M2LzEvSmFvelkxTEM2MHlLSHhkSXhPQi1FMGlYMXQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2
LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRYrMA0G
CSqGSIb3DQEBCwUAA4IBAQAAMvfbF5w9KPXj6IV6bjDzaOF24CymKwZq3kYNOp5Y
iAQhQuYw/DEyHfPH15ZuQ/sA8bw2v5QzZxXNMEbpZthmIwc92VNi9/L5bpsMMLnk
D2V1XWiKhahXxJ9EINn0bnWi1/8tUN2LrxtjjdUiuSJ6j1rHbDmT9YrSN23s3Wt7
/ZNCyGQjdizVoJx7L/+soDNFYPReFaz45W5STTgUu5FxNsGFf7E8AzMSxkG56eyX
XsyEpLV6KNgNo3uKxoFVB005TumEzANS8Mm6uEJ6KzbLECqRmdbm/FMNbRizPimY
B25a0RTOrCmIqkcVc0CDqRng8ch9RbWLCErwNj8P2CAV
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:44:31 2025 by rpki-client